@pensar/apex 2.1.2-canary.b00d36c6 → 2.1.2

package/build/{cli-jrgg8mm7.js → cli-35czfv00.js}

@@ -1,6 +1,6 @@
 import {
   detectOSAndEnhancePrompt
-} from "./cli-p1607qpm.js";
+} from "./cli-6wwpk9d9.js";
 import {
   parseTargetUrl
 } from "./cli-c8131c4q.js";
@@ -26,14 +26,14 @@ import {
   scopedLogger,
   streamResponse,
   write
-} from "./cli-f11c6hrv.js";
+} from "./cli-v1aqbv58.js";
 import {
   ensureValidToken,
   getPensarApiUrl,
   init_auth,
   init_constants,
   signGatewayRequest
-} from "./cli-2tg2kjh8.js";
+} from "./cli-hj3t87r2.js";
 import {
   exports_external,
   init_zod,
@@ -43,7 +43,7 @@ import {
 import {
   config,
   init_config
-} from "./cli-h9ckbgyv.js";
+} from "./cli-9z6vwf30.js";
 import {
   __commonJS,
   __export,
@@ -42466,8 +42466,8 @@ var require_core3 = __commonJS((exports) => {
   function many1(p) {
     return ab(p, many(p), (head, tail) => [head, ...tail]);
   }
-  function ab(pa, pb, join15) {
-    return (data, i) => mapOuter(pa(data, i), (ma) => mapInner(pb(data, ma.position), (vb, j) => join15(ma.value, vb, data, i, j)));
+  function ab(pa, pb, join14) {
+    return (data, i) => mapOuter(pa(data, i), (ma) => mapInner(pb(data, ma.position), (vb, j) => join14(ma.value, vb, data, i, j)));
   }
   function left(pa, pb) {
     return ab(pa, pb, (va) => va);
@@ -42475,8 +42475,8 @@ var require_core3 = __commonJS((exports) => {
   function right(pa, pb) {
     return ab(pa, pb, (va, vb) => vb);
   }
-  function abc(pa, pb, pc, join15) {
-    return (data, i) => mapOuter(pa(data, i), (ma) => mapOuter(pb(data, ma.position), (mb) => mapInner(pc(data, mb.position), (vc, j) => join15(ma.value, mb.value, vc, data, i, j))));
+  function abc(pa, pb, pc, join14) {
+    return (data, i) => mapOuter(pa(data, i), (ma) => mapOuter(pb(data, ma.position), (mb) => mapInner(pc(data, mb.position), (vc, j) => join14(ma.value, mb.value, vc, data, i, j))));
   }
   function middle(pa, pb, pc) {
     return abc(pa, pb, pc, (ra, rb) => rb);
@@ -46221,10 +46221,10 @@ var require_helpers = __commonJS((exports) => {
       return !arr.includes(node, i + 1);
     });
     nodes.sort(function(a, b) {
-      var relative2 = compareDocumentPosition(a, b);
-      if (relative2 & DocumentPosition.PRECEDING) {
+      var relative = compareDocumentPosition(a, b);
+      if (relative & DocumentPosition.PRECEDING) {
         return -1;
-      } else if (relative2 & DocumentPosition.FOLLOWING) {
+      } else if (relative & DocumentPosition.FOLLOWING) {
         return 1;
       }
       return 0;
@@ -50952,8 +50952,8 @@ var require_simple_parser = __commonJS((exports, module) => {
     }
     let promise2;
     if (!callback) {
-      promise2 = new Promise((resolve3, reject) => {
-        callback = callbackPromise(resolve3, reject);
+      promise2 = new Promise((resolve2, reject) => {
+        callback = callbackPromise(resolve2, reject);
       });
     }
     options = options || {};
@@ -51039,13 +51039,13 @@ var require_simple_parser = __commonJS((exports, module) => {
     }
     return promise2;
   };
-  function callbackPromise(resolve3, reject) {
+  function callbackPromise(resolve2, reject) {
     return function(...args) {
       let err = args.shift();
       if (err) {
         reject(err);
       } else {
-        resolve3(...args);
+        resolve2(...args);
       }
     };
   }
@@ -51474,8 +51474,8 @@ var require_retry = __commonJS((exports) => {
     }
     const delay = getNextRetryDelay(config3);
     err.config.retryConfig.currentRetryAttempt += 1;
-    const backoff = config3.retryBackoff ? config3.retryBackoff(err, delay) : new Promise((resolve3) => {
-      setTimeout(resolve3, delay);
+    const backoff = config3.retryBackoff ? config3.retryBackoff(err, delay) : new Promise((resolve2) => {
+      setTimeout(resolve2, delay);
     });
     if (config3.onRetryAttempt) {
       await config3.onRetryAttempt(err);
@@ -57091,7 +57091,7 @@ var require_jwtaccess = __commonJS((exports) => {
       }
     }
     fromStreamAsync(inputStream) {
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve2, reject) => {
         if (!inputStream) {
           reject(new Error("Must pass in a stream containing the service account auth settings."));
         }
@@ -57100,7 +57100,7 @@ var require_jwtaccess = __commonJS((exports) => {
           try {
             const data = JSON.parse(s);
             this.fromJSON(data);
-            resolve3();
+            resolve2();
           } catch (err) {
             reject(err);
           }
@@ -57287,7 +57287,7 @@ var require_jwtclient = __commonJS((exports) => {
       }
     }
     fromStreamAsync(inputStream) {
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve2, reject) => {
         if (!inputStream) {
           throw new Error("Must pass in a stream containing the service account auth settings.");
         }
@@ -57296,7 +57296,7 @@ var require_jwtclient = __commonJS((exports) => {
           try {
             const data = JSON.parse(s);
             this.fromJSON(data);
-            resolve3();
+            resolve2();
           } catch (e) {
             reject(e);
           }
@@ -57397,7 +57397,7 @@ var require_refreshclient = __commonJS((exports) => {
       }
     }
     async fromStreamAsync(inputStream) {
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve2, reject) => {
         if (!inputStream) {
           return reject(new Error("Must pass in a stream containing the user refresh token."));
         }
@@ -57406,7 +57406,7 @@ var require_refreshclient = __commonJS((exports) => {
           try {
             const data = JSON.parse(s);
             this.fromJSON(data);
-            return resolve3();
+            return resolve2();
           } catch (err) {
             return reject(err);
           }
@@ -58770,7 +58770,7 @@ var require_pluggable_auth_handler = __commonJS((exports) => {
       this.outputFile = options.outputFile;
     }
     retrieveResponseFromExecutable(envMap) {
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve2, reject) => {
         const child = childProcess.spawn(this.commandComponents[0], this.commandComponents.slice(1), {
           env: { ...process.env, ...Object.fromEntries(envMap) }
         });
@@ -58792,7 +58792,7 @@ var require_pluggable_auth_handler = __commonJS((exports) => {
             try {
               const responseJson = JSON.parse(output);
               const response = new executable_response_1.ExecutableResponse(responseJson);
-              return resolve3(response);
+              return resolve2(response);
             } catch (error2) {
               if (error2 instanceof executable_response_1.ExecutableResponseError) {
                 return reject(error2);
@@ -59444,7 +59444,7 @@ var require_googleauth = __commonJS((exports) => {
       }
     }
     fromStreamAsync(inputStream, options) {
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve2, reject) => {
         if (!inputStream) {
           throw new Error("Must pass in a stream containing the Google auth settings.");
         }
@@ -59454,7 +59454,7 @@ var require_googleauth = __commonJS((exports) => {
             try {
               const data = JSON.parse(chunks.join(""));
               const r = this._cacheClientFromJSON(data, options);
-              return resolve3(r);
+              return resolve2(r);
             } catch (err) {
               if (!this.keyFilename)
                 throw err;
@@ -59464,7 +59464,7 @@ var require_googleauth = __commonJS((exports) => {
               });
               this.cachedCredential = client;
               this.setGapicJWTValues(client);
-              return resolve3(client);
+              return resolve2(client);
             }
           } catch (err) {
             return reject(err);
@@ -59485,16 +59485,16 @@ var require_googleauth = __commonJS((exports) => {
       return false;
     }
     async getDefaultServiceProjectId() {
-      return new Promise((resolve3) => {
+      return new Promise((resolve2) => {
         (0, child_process_1.exec)("gcloud config config-helper --format json", (err, stdout) => {
           if (!err && stdout) {
             try {
               const projectId = JSON.parse(stdout).configuration.properties.core.project;
-              resolve3(projectId);
+              resolve2(projectId);
               return;
             } catch (e) {}
           }
-          resolve3(null);
+          resolve2(null);
         });
       });
     }
@@ -62473,7 +62473,7 @@ var require_http2 = __commonJS((exports) => {
     const chunks = [];
     const session = sessionData.session;
     let req;
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve2, reject) => {
       try {
         req = session.request(headers).on("response", (responseHeaders) => {
           Object.assign(res, {
@@ -62486,7 +62486,7 @@ var require_http2 = __commonJS((exports) => {
           }
           if (opts.responseType === "stream") {
             res.data = stream;
-            resolve3(res);
+            resolve2(res);
             return;
           }
           stream.on("data", (d) => {
@@ -62520,7 +62520,7 @@ var require_http2 = __commonJS((exports) => {
               }
               reject(new Error(message, { cause: res }));
             }
-            resolve3(res);
+            resolve2(res);
             return;
           });
         }).on("error", (e) => {
@@ -63062,7 +63062,7 @@ var require_discovery = __commonJS((exports) => {
   exports.Discovery = undefined;
   var fs = __require("fs");
   var gaxios_1 = require_src3();
-  var resolve3 = __require("url");
+  var resolve2 = __require("url");
   var util = __require("util");
   var apirequest_1 = require_apirequest();
   var endpoint_1 = require_endpoint();
@@ -63128,7 +63128,7 @@ var require_discovery = __commonJS((exports) => {
     }
     async discoverAPI(apiDiscoveryUrl) {
       if (typeof apiDiscoveryUrl === "string") {
-        const parts = resolve3.parse(apiDiscoveryUrl);
+        const parts = resolve2.parse(apiDiscoveryUrl);
         if (apiDiscoveryUrl && !parts.protocol) {
           this.log("Reading from file " + apiDiscoveryUrl);
           const file = await readFile(apiDiscoveryUrl, { encoding: "utf8" });
@@ -66001,12 +66001,12 @@ var require_BatchRequestContent = __commonJS((exports) => {
             case 6:
               blob_1 = _a.sent();
               reader_1 = new FileReader;
-              return [4, new Promise(function(resolve3) {
+              return [4, new Promise(function(resolve2) {
                 reader_1.addEventListener("load", function() {
                   var dataURL = reader_1.result;
                   var regex = new RegExp("^s*data:(.+?/.+?(;.+?=.+?)*)?(;base64)?,(.*)s*$");
                   var segments = regex.exec(dataURL);
-                  resolve3(segments[4]);
+                  resolve2(segments[4]);
                 }, false);
                 reader_1.readAsDataURL(blob_1);
               })];
@@ -66782,8 +66782,8 @@ var require_RetryHandler = __commonJS((exports) => {
         var delayMilliseconds;
         return tslib_1.__generator(this, function(_a) {
           delayMilliseconds = delaySeconds * 1000;
-          return [2, new Promise(function(resolve3) {
-            return setTimeout(resolve3, delayMilliseconds);
+          return [2, new Promise(function(resolve2) {
+            return setTimeout(resolve2, delayMilliseconds);
           })];
         });
       });
@@ -67456,12 +67456,12 @@ var require_GraphResponseHandler = __commonJS((exports) => {
     function GraphResponseHandler2() {}
     GraphResponseHandler2.parseDocumentResponse = function(rawResponse, type) {
       if (typeof DOMParser !== "undefined") {
-        return new Promise(function(resolve3, reject) {
+        return new Promise(function(resolve2, reject) {
           rawResponse.text().then(function(xmlString) {
             try {
               var parser = new DOMParser;
               var xmlDoc = parser.parseFromString(xmlString, type);
-              resolve3(xmlDoc);
+              resolve2(xmlDoc);
             } catch (error2) {
               reject(error2);
             }
@@ -68135,7 +68135,7 @@ var require_StreamUpload = __commonJS((exports) => {
     };
     StreamUpload2.prototype.readNBytesFromStream = function(size) {
       var _this = this;
-      return new Promise(function(resolve3, reject) {
+      return new Promise(function(resolve2, reject) {
         var chunks = [];
         var remainder = size;
         var length = 0;
@@ -68154,7 +68154,7 @@ var require_StreamUpload = __commonJS((exports) => {
             }
           }
           if (length === size) {
-            return resolve3(Buffer.concat(chunks));
+            return resolve2(Buffer.concat(chunks));
           }
           if (!_this.content || !_this.content.readable) {
             return reject(new GraphClientError_1.GraphClientError("Error encountered while reading the stream during the upload"));
@@ -68289,7 +68289,7 @@ var require_CustomAuthenticationProvider = __commonJS((exports) => {
       return tslib_1.__awaiter(this, undefined, undefined, function() {
         var _this = this;
         return tslib_1.__generator(this, function(_a) {
-          return [2, new Promise(function(resolve3, reject) {
+          return [2, new Promise(function(resolve2, reject) {
             _this.provider(function(error2, accessToken) {
               return tslib_1.__awaiter(_this, undefined, undefined, function() {
                 var invalidTokenMessage, err;
@@ -68298,7 +68298,7 @@ var require_CustomAuthenticationProvider = __commonJS((exports) => {
                     case 0:
                       if (!accessToken)
                         return [3, 1];
-                      resolve3(accessToken);
+                      resolve2(accessToken);
                       return [3, 3];
                     case 1:
                       if (!error2) {
@@ -71159,7 +71159,7 @@ var require_thread_stream = __commonJS((exports, module) => {
   var { version: version2 } = require_package5();
   var { EventEmitter: EventEmitter2 } = __require("events");
   var { Worker } = __require("worker_threads");
-  var { join: join15 } = __require("path");
+  var { join: join14 } = __require("path");
   var { pathToFileURL } = __require("url");
   var { wait } = require_wait();
   var {
@@ -71195,7 +71195,7 @@ var require_thread_stream = __commonJS((exports, module) => {
   function createWorker(stream, opts) {
     const { filename, workerData } = opts;
     const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-    const toExecute = bundlerOverrides["thread-stream-worker"] || join15(__dirname, "lib", "worker.js");
+    const toExecute = bundlerOverrides["thread-stream-worker"] || join14(__dirname, "lib", "worker.js");
     const worker = new Worker(toExecute, {
       ...opts.workerOpts,
       trackUnmanagedFds: false,
@@ -71584,7 +71584,7 @@ var require_transport = __commonJS((exports, module) => {
   var { createRequire: createRequire3 } = __require("module");
   var { existsSync: existsSync9 } = __require("node:fs");
   var getCallers = require_caller();
-  var { join: join15, isAbsolute: isAbsolute3, sep: sep2 } = __require("node:path");
+  var { join: join14, isAbsolute: isAbsolute2, sep } = __require("node:path");
   var { fileURLToPath } = __require("node:url");
   var sleep = require_atomic_sleep();
   var onExit = require_on_exit_leak_free();
@@ -71656,7 +71656,7 @@ var require_transport = __commonJS((exports, module) => {
         return false;
       }
     }
-    return isAbsolute3(path) && !existsSync9(path);
+    return isAbsolute2(path) && !existsSync9(path);
   }
   function stripQuotes(value) {
     const first = value[0];
@@ -71737,7 +71737,7 @@ var require_transport = __commonJS((exports, module) => {
       throw new Error("only one of target or targets can be specified");
     }
     if (targets) {
-      target = bundlerOverrides["pino-worker"] || join15(__dirname, "worker.js");
+      target = bundlerOverrides["pino-worker"] || join14(__dirname, "worker.js");
       options.targets = targets.filter((dest) => dest.target).map((dest) => {
         return {
           ...dest,
@@ -71754,7 +71754,7 @@ var require_transport = __commonJS((exports, module) => {
         });
       });
     } else if (pipeline2) {
-      target = bundlerOverrides["pino-worker"] || join15(__dirname, "worker.js");
+      target = bundlerOverrides["pino-worker"] || join14(__dirname, "worker.js");
       options.pipelines = [pipeline2.map((dest) => {
         return {
           ...dest,
@@ -71773,16 +71773,16 @@ var require_transport = __commonJS((exports, module) => {
     return buildStream(fixTarget(target), options, worker, sync, name);
     function fixTarget(origin) {
       origin = bundlerOverrides[origin] || origin;
-      if (isAbsolute3(origin) || origin.indexOf("file://") === 0) {
+      if (isAbsolute2(origin) || origin.indexOf("file://") === 0) {
         return origin;
       }
       if (origin === "pino/file") {
-        return join15(__dirname, "..", "file.js");
+        return join14(__dirname, "..", "file.js");
       }
       let fixTarget2;
       for (const filePath of callers) {
         try {
-          const context = filePath === "node:repl" ? process.cwd() + sep2 : filePath;
+          const context = filePath === "node:repl" ? process.cwd() + sep : filePath;
           fixTarget2 = createRequire3(context).resolve(origin);
           break;
         } catch (err) {
@@ -72706,7 +72706,7 @@ var require_safe_stable_stringify = __commonJS((exports, module) => {
             return circularValue;
           }
           let res = "";
-          let join15 = ",";
+          let join14 = ",";
           const originalIndentation = indentation;
           if (Array.isArray(value)) {
             if (value.length === 0) {
@@ -72720,7 +72720,7 @@ var require_safe_stable_stringify = __commonJS((exports, module) => {
               indentation += spacer;
               res += `
 ${indentation}`;
-              join15 = `,
+              join14 = `,
 ${indentation}`;
             }
             const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -72728,13 +72728,13 @@ ${indentation}`;
             for (;i < maximumValuesToStringify - 1; i++) {
               const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp2 !== undefined ? tmp2 : "null";
-              res += join15;
+              res += join14;
             }
             const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
             res += tmp !== undefined ? tmp : "null";
             if (value.length - 1 > maximumBreadth) {
               const removedKeys = value.length - maximumBreadth - 1;
-              res += `${join15}"... ${getItemCount(removedKeys)} not stringified"`;
+              res += `${join14}"... ${getItemCount(removedKeys)} not stringified"`;
             }
             if (spacer !== "") {
               res += `
@@ -72755,7 +72755,7 @@ ${originalIndentation}`;
           let separator = "";
           if (spacer !== "") {
             indentation += spacer;
-            join15 = `,
+            join14 = `,
 ${indentation}`;
             whitespace = " ";
           }
@@ -72769,13 +72769,13 @@ ${indentation}`;
             const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
             if (tmp !== undefined) {
               res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-              separator = join15;
+              separator = join14;
             }
           }
           if (keyLength > maximumBreadth) {
             const removedKeys = keyLength - maximumBreadth;
             res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-            separator = join15;
+            separator = join14;
           }
           if (spacer !== "" && separator.length > 1) {
             res = `
@@ -72815,7 +72815,7 @@ ${originalIndentation}`;
           }
           const originalIndentation = indentation;
           let res = "";
-          let join15 = ",";
+          let join14 = ",";
           if (Array.isArray(value)) {
             if (value.length === 0) {
               return "[]";
@@ -72828,7 +72828,7 @@ ${originalIndentation}`;
               indentation += spacer;
               res += `
 ${indentation}`;
-              join15 = `,
+              join14 = `,
 ${indentation}`;
             }
             const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -72836,13 +72836,13 @@ ${indentation}`;
             for (;i < maximumValuesToStringify - 1; i++) {
               const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp2 !== undefined ? tmp2 : "null";
-              res += join15;
+              res += join14;
             }
             const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
             res += tmp !== undefined ? tmp : "null";
             if (value.length - 1 > maximumBreadth) {
               const removedKeys = value.length - maximumBreadth - 1;
-              res += `${join15}"... ${getItemCount(removedKeys)} not stringified"`;
+              res += `${join14}"... ${getItemCount(removedKeys)} not stringified"`;
             }
             if (spacer !== "") {
               res += `
@@ -72855,7 +72855,7 @@ ${originalIndentation}`;
           let whitespace = "";
           if (spacer !== "") {
             indentation += spacer;
-            join15 = `,
+            join14 = `,
 ${indentation}`;
             whitespace = " ";
           }
@@ -72864,7 +72864,7 @@ ${indentation}`;
             const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
             if (tmp !== undefined) {
               res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-              separator = join15;
+              separator = join14;
             }
           }
           if (spacer !== "" && separator.length > 1) {
@@ -72921,20 +72921,20 @@ ${originalIndentation}`;
             indentation += spacer;
             let res2 = `
 ${indentation}`;
-            const join16 = `,
+            const join15 = `,
 ${indentation}`;
             const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
             let i = 0;
             for (;i < maximumValuesToStringify - 1; i++) {
               const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp2 !== undefined ? tmp2 : "null";
-              res2 += join16;
+              res2 += join15;
             }
             const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
             res2 += tmp !== undefined ? tmp : "null";
             if (value.length - 1 > maximumBreadth) {
               const removedKeys = value.length - maximumBreadth - 1;
-              res2 += `${join16}"... ${getItemCount(removedKeys)} not stringified"`;
+              res2 += `${join15}"... ${getItemCount(removedKeys)} not stringified"`;
             }
             res2 += `
 ${originalIndentation}`;
@@ -72950,16 +72950,16 @@ ${originalIndentation}`;
             return '"[Object]"';
           }
           indentation += spacer;
-          const join15 = `,
+          const join14 = `,
 ${indentation}`;
           let res = "";
           let separator = "";
           let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
           if (isTypedArrayWithEntries(value)) {
-            res += stringifyTypedArray(value, join15, maximumBreadth);
+            res += stringifyTypedArray(value, join14, maximumBreadth);
             keys = keys.slice(value.length);
             maximumPropertiesToStringify -= value.length;
-            separator = join15;
+            separator = join14;
           }
           if (deterministic) {
             keys = sort(keys, comparator);
@@ -72970,13 +72970,13 @@ ${indentation}`;
             const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
             if (tmp !== undefined) {
               res += `${separator}${strEscape(key2)}: ${tmp}`;
-              separator = join15;
+              separator = join14;
             }
           }
           if (keyLength > maximumBreadth) {
             const removedKeys = keyLength - maximumBreadth;
             res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-            separator = join15;
+            separator = join14;
           }
           if (separator !== "") {
             res = `
@@ -74749,8 +74749,8 @@ var require_imap_stream = __commonJS((exports, module) => {
                   payload = payload.slice(0, end);
                 }
                 if (payload.length) {
-                  await new Promise((resolve3) => {
-                    this.push({ payload, literals, next: resolve3 });
+                  await new Promise((resolve2) => {
+                    this.push({ payload, literals, next: resolve2 });
                   });
                 }
               }
@@ -74787,7 +74787,7 @@ var require_imap_stream = __commonJS((exports, module) => {
         data.next();
         processedCount++;
         if (processedCount % 10 === 0) {
-          await new Promise((resolve3) => setImmediate(resolve3));
+          await new Promise((resolve2) => setImmediate(resolve2));
         }
       }
     }
@@ -78181,11 +78181,11 @@ var require_receivebuffer = __commonJS((exports) => {
 var require_socksclient = __commonJS((exports) => {
   var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
     function adopt(value) {
-      return value instanceof P ? value : new P(function(resolve3) {
-        resolve3(value);
+      return value instanceof P ? value : new P(function(resolve2) {
+        resolve2(value);
       });
     }
-    return new (P || (P = Promise))(function(resolve3, reject) {
+    return new (P || (P = Promise))(function(resolve2, reject) {
       function fulfilled(value) {
         try {
           step(generator.next(value));
@@ -78201,7 +78201,7 @@ var require_socksclient = __commonJS((exports) => {
         }
       }
       function step(result) {
-        result.done ? resolve3(result.value) : adopt(result.value).then(fulfilled, rejected);
+        result.done ? resolve2(result.value) : adopt(result.value).then(fulfilled, rejected);
       }
       step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
@@ -78228,13 +78228,13 @@ var require_socksclient = __commonJS((exports) => {
       this.setState(constants_1.SocksClientState.Created);
     }
     static createConnection(options, callback) {
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve2, reject) => {
         try {
           (0, helpers_1.validateSocksClientOptions)(options, ["connect"]);
         } catch (err) {
           if (typeof callback === "function") {
             callback(err);
-            return resolve3(err);
+            return resolve2(err);
           } else {
             return reject(err);
           }
@@ -78245,16 +78245,16 @@ var require_socksclient = __commonJS((exports) => {
           client.removeAllListeners();
           if (typeof callback === "function") {
             callback(null, info);
-            resolve3(info);
+            resolve2(info);
           } else {
-            resolve3(info);
+            resolve2(info);
           }
         });
         client.once("error", (err) => {
           client.removeAllListeners();
           if (typeof callback === "function") {
             callback(err);
-            resolve3(err);
+            resolve2(err);
           } else {
             reject(err);
           }
@@ -78262,13 +78262,13 @@ var require_socksclient = __commonJS((exports) => {
       });
     }
     static createConnectionChain(options, callback) {
-      return new Promise((resolve3, reject) => __awaiter(this, undefined, undefined, function* () {
+      return new Promise((resolve2, reject) => __awaiter(this, undefined, undefined, function* () {
         try {
           (0, helpers_1.validateSocksClientChainOptions)(options);
         } catch (err) {
           if (typeof callback === "function") {
             callback(err);
-            return resolve3(err);
+            return resolve2(err);
           } else {
             return reject(err);
           }
@@ -78294,14 +78294,14 @@ var require_socksclient = __commonJS((exports) => {
           }
           if (typeof callback === "function") {
             callback(null, { socket: sock });
-            resolve3({ socket: sock });
+            resolve2({ socket: sock });
           } else {
-            resolve3({ socket: sock });
+            resolve2({ socket: sock });
           }
         } catch (err) {
           if (typeof callback === "function") {
             callback(err);
-            resolve3(err);
+            resolve2(err);
           } else {
             reject(err);
           }
@@ -82804,7 +82804,7 @@ var require_tools2 = __commonJS((exports, module) => {
   var libmime = require_libmime2();
   var { resolveCharset } = require_charsets3();
   var { compiler } = require_imap_handler();
-  var { createHash: createHash2 } = __require("crypto");
+  var { createHash } = __require("crypto");
   var { JPDecoder } = require_jp_decoder();
   var iconv = require_lib11();
   var FLAG_COLORS = ["red", "orange", "yellow", "green", "blue", "purple", "grey"];
@@ -83105,7 +83105,7 @@ var require_tools2 = __commonJS((exports, module) => {
             path = iconv.encode(path, "utf-7-imap").toString();
           } catch {}
         }
-        map2.id = map2.emailId || createHash2("md5").update([path, mailbox.uidValidity?.toString() || "", map2.uid.toString()].join(":")).digest("hex");
+        map2.id = map2.emailId || createHash("md5").update([path, mailbox.uidValidity?.toString() || "", map2.uid.toString()].join(":")).digest("hex");
       }
       if (map2.flags) {
         let flagColor = tools.getFlagColor(map2.flags);
@@ -84559,12 +84559,12 @@ var require_fetch = __commonJS((exports, module) => {
               messages.count++;
               let formatted = await formatMessageResponse(untagged, mailbox);
               if (typeof options.onUntaggedFetch === "function") {
-                await new Promise((resolve3, reject) => {
+                await new Promise((resolve2, reject) => {
                   options.onUntaggedFetch(formatted, (err) => {
                     if (err) {
                       reject(err);
                     } else {
-                      resolve3();
+                      resolve2();
                     }
                   });
                 });
@@ -84589,7 +84589,7 @@ var require_fetch = __commonJS((exports, module) => {
             retryCount,
             delayMs: delay
           });
-          await new Promise((resolve3) => setTimeout(resolve3, delay));
+          await new Promise((resolve2) => setTimeout(resolve2, delay));
           retryCount++;
           continue;
         }
@@ -85727,14 +85727,14 @@ var require_idle = __commonJS((exports, module) => {
           connection.idling = false;
           connection.preCheck = false;
           while (preCheckWaitQueue.length) {
-            let { resolve: resolve3 } = preCheckWaitQueue.shift();
-            resolve3();
+            let { resolve: resolve2 } = preCheckWaitQueue.shift();
+            resolve2();
           }
         }
       };
       let connectionPreCheck = () => {
-        let handler = new Promise((resolve3, reject) => {
-          preCheckWaitQueue.push({ resolve: resolve3, reject });
+        let handler = new Promise((resolve2, reject) => {
+          preCheckWaitQueue.push({ resolve: resolve2, reject });
         });
         connection.log.trace({
           msg: "Requesting IDLE break",
@@ -85775,8 +85775,8 @@ var require_idle = __commonJS((exports, module) => {
         });
         connection.preCheck = false;
         while (preCheckWaitQueue.length) {
-          let { resolve: resolve3 } = preCheckWaitQueue.shift();
-          resolve3();
+          let { resolve: resolve2 } = preCheckWaitQueue.shift();
+          resolve2();
         }
       }
       response.next();
@@ -85822,16 +85822,16 @@ var require_idle = __commonJS((exports, module) => {
       return runIdleLoop();
     }
     let idleTimer;
-    return new Promise((resolve3) => {
+    return new Promise((resolve2) => {
       if (!connection.currentSelectCommand) {
-        return resolve3();
+        return resolve2();
       }
       connection.preCheck = async () => {
         connection.preCheck = false;
         clearTimeout(idleTimer);
         connection.log.debug({ src: "c", msg: `breaking NOOP loop` });
         connection.idling = false;
-        resolve3();
+        resolve2();
       };
       let selectCommand = connection.currentSelectCommand;
       let idleCheck = async () => {
@@ -85867,7 +85867,7 @@ var require_idle = __commonJS((exports, module) => {
           clearTimeout(idleTimer);
           connection.preCheck = false;
           connection.log.warn({ err, cid: connection.id });
-          resolve3();
+          resolve2();
         });
       };
       connection.log.debug({ src: "c", msg: `initiated NOOP loop` });
@@ -95872,7 +95872,7 @@ var require_shared3 = __commonJS((exports, module) => {
     }
     return Object.keys(ifaces).map((key) => ifaces[key]).reduce((acc, val) => acc.concat(val), []).filter((i) => !i.internal || allowInternal).some((i) => i.family === "IPv" + family || i.family === family);
   };
-  var resolve3 = (family, hostname2, options, callback) => {
+  var resolve2 = (family, hostname2, options, callback) => {
     options = options || {};
     if (!isFamilySupported(family, options.allowInternalNetworkInterfaces)) {
       return callback(null, []);
@@ -95949,13 +95949,13 @@ var require_shared3 = __commonJS((exports, module) => {
     let ipv6Addresses = [];
     let ipv4Error = null;
     let ipv6Error = null;
-    resolve3(4, options.host, options, (err, addresses) => {
+    resolve2(4, options.host, options, (err, addresses) => {
       if (err) {
         ipv4Error = err;
       } else {
         ipv4Addresses = addresses || [];
       }
-      resolve3(6, options.host, options, (err2, addresses2) => {
+      resolve2(6, options.host, options, (err2, addresses2) => {
         if (err2) {
           ipv6Error = err2;
         } else {
@@ -96120,13 +96120,13 @@ var require_shared3 = __commonJS((exports, module) => {
     });
     return response;
   };
-  exports.callbackPromise = (resolve4, reject) => function() {
+  exports.callbackPromise = (resolve3, reject) => function() {
     const args = Array.from(arguments);
     const err = args.shift();
     if (err) {
       reject(err);
     } else {
-      resolve4(...args);
+      resolve3(...args);
     }
   };
   exports.parseDataURI = (uri) => {
@@ -96188,8 +96188,8 @@ var require_shared3 = __commonJS((exports, module) => {
   exports.resolveContent = (data, key, callback) => {
     let promise2;
     if (!callback) {
-      promise2 = new Promise((resolve4, reject) => {
-        callback = exports.callbackPromise(resolve4, reject);
+      promise2 = new Promise((resolve3, reject) => {
+        callback = exports.callbackPromise(resolve3, reject);
       });
     }
     let content = data && data[key] && data[key].content || data[key];
@@ -99855,8 +99855,8 @@ var require_mime_node3 = __commonJS((exports, module) => {
     build(callback) {
       let promise2;
       if (!callback) {
-        promise2 = new Promise((resolve3, reject) => {
-          callback = shared.callbackPromise(resolve3, reject);
+        promise2 = new Promise((resolve2, reject) => {
+          callback = shared.callbackPromise(resolve2, reject);
         });
       }
       const stream = this.createReadStream();
@@ -101703,8 +101703,8 @@ var require_mailer = __commonJS((exports, module) => {
     sendMail(data, callback = null) {
       let promise2;
       if (!callback) {
-        promise2 = new Promise((resolve3, reject) => {
-          callback = shared.callbackPromise(resolve3, reject);
+        promise2 = new Promise((resolve2, reject) => {
+          callback = shared.callbackPromise(resolve2, reject);
         });
       }
       if (typeof this.getSocket === "function") {
@@ -102282,7 +102282,7 @@ var require_smtp_connection = __commonJS((exports, module) => {
         const handler = this.customAuth.get(this._authMethod);
         let lastResponse;
         let returned = false;
-        const resolve3 = () => {
+        const resolve2 = () => {
           if (returned) {
             return;
           }
@@ -102312,8 +102312,8 @@ var require_smtp_connection = __commonJS((exports, module) => {
           sendCommand: (cmd, done) => {
             let promise2;
             if (!done) {
-              promise2 = new Promise((resolve4, reject2) => {
-                done = shared.callbackPromise(resolve4, reject2);
+              promise2 = new Promise((resolve3, reject2) => {
+                done = shared.callbackPromise(resolve3, reject2);
               });
             }
             this._responseActions.push((str) => {
@@ -102338,11 +102338,11 @@ var require_smtp_connection = __commonJS((exports, module) => {
             setImmediate(() => this._sendCommand(cmd));
             return promise2;
           },
-          resolve: resolve3,
+          resolve: resolve2,
           reject
         });
         if (handlerResponse && typeof handlerResponse.catch === "function") {
-          handlerResponse.then(resolve3).catch(reject);
+          handlerResponse.then(resolve2).catch(reject);
         }
         return;
       }
@@ -104509,8 +104509,8 @@ var require_smtp_pool = __commonJS((exports, module) => {
     verify(callback) {
       let promise2;
       if (!callback) {
-        promise2 = new Promise((resolve3, reject) => {
-          callback = shared.callbackPromise(resolve3, reject);
+        promise2 = new Promise((resolve2, reject) => {
+          callback = shared.callbackPromise(resolve2, reject);
         });
       }
       const auth = new PoolResource(this).auth;
@@ -104783,8 +104783,8 @@ var require_smtp_transport = __commonJS((exports, module) => {
     verify(callback) {
       let promise2;
       if (!callback) {
-        promise2 = new Promise((resolve3, reject) => {
-          callback = shared.callbackPromise(resolve3, reject);
+        promise2 = new Promise((resolve2, reject) => {
+          callback = shared.callbackPromise(resolve2, reject);
         });
       }
       this.getSocket(this.options, (err, socketOptions) => {
@@ -105249,8 +105249,8 @@ var require_ses_transport = __commonJS((exports, module) => {
     verify(callback) {
       let promise2;
       if (!callback) {
-        promise2 = new Promise((resolve3, reject) => {
-          callback = shared.callbackPromise(resolve3, reject);
+        promise2 = new Promise((resolve2, reject) => {
+          callback = shared.callbackPromise(resolve2, reject);
         });
       }
       const cb = (err) => {
@@ -114664,169 +114664,7 @@ The returned cookies can be formatted as a Cookie header for use with http_reque
 // src/core/agents/offSecAgent/tools/browserTools.ts
 init_dist();
 init_zod();
-import { join as join7 } from "node:path";
-
-// src/core/prompt-injections/index.ts
-init_zod();
-import { createHash } from "node:crypto";
-import { readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
-import { dirname as dirname4, isAbsolute, join as join6, relative, resolve, sep } from "node:path";
-function sha256(value) {
-  return createHash("sha256").update(value).digest("hex");
-}
-var PromptInjectionCatalogEntrySchema = exports_external.object({
-  id: exports_external.string().min(1),
-  name: exports_external.string().min(1).optional(),
-  category: exports_external.string().min(1).optional(),
-  description: exports_external.string().default(""),
-  tags: exports_external.array(exports_external.string()).default([]),
-  deliveryHints: exports_external.array(exports_external.string()).default([]),
-  expectedObservation: exports_external.string().default(""),
-  payloadPath: exports_external.string().min(1)
-});
-var PromptInjectionLibraryFileSchema = exports_external.union([
-  exports_external.array(PromptInjectionCatalogEntrySchema),
-  exports_external.object({
-    payloads: exports_external.array(PromptInjectionCatalogEntrySchema)
-  }),
-  exports_external.object({
-    injections: exports_external.array(PromptInjectionCatalogEntrySchema)
-  })
-]);
-function isPromptInjectionRef(value) {
-  return typeof value === "object" && value !== null && value.kind === "prompt_injection_ref" && typeof value.id === "string";
-}
-
-class StaticPromptInjectionLibrary {
-  ordered;
-  entries;
-  hashes;
-  constructor(entries) {
-    this.ordered = entries;
-    this.entries = new Map(entries.map((entry) => [entry.id, entry]));
-    this.hashes = new Map(entries.map((entry) => [entry.id, sha256(entry.payload)]));
-  }
-  listCatalog() {
-    return this.ordered.map(({ payload, payloadFilePath: _path, ...entry }) => ({
-      ...entry,
-      payloadHash: sha256(payload)
-    }));
-  }
-  getPayload(id) {
-    return this.entries.get(id)?.payload;
-  }
-  getPayloadFilePath(id) {
-    return this.entries.get(id)?.payloadFilePath;
-  }
-  getPayloadHash(id) {
-    return this.hashes.get(id);
-  }
-  has(id) {
-    return this.entries.has(id);
-  }
-}
-var EMPTY_PROMPT_INJECTION_LIBRARY = new StaticPromptInjectionLibrary([]);
-var SOURCE_CACHE = new Map;
-function resolvePromptInjectionLibrarySource(explicit) {
-  return explicit || process.env.PENSAR_PROMPT_INJECTION_LIBRARY || process.env.APEX_PROMPT_INJECTION_LIBRARY;
-}
-function resolveCatalogPath(source) {
-  if (source.startsWith("https://") || source.startsWith("http://")) {
-    throw new Error("Prompt injection library source must be a local path, not a URL.");
-  }
-  const path = source.startsWith("file://") ? source.slice(7) : source;
-  const resolved = isAbsolute(path) ? path : resolve(process.cwd(), path);
-  const stat = statSync2(resolved);
-  if (stat.isDirectory()) {
-    return { catalogPath: join6(resolved, "catalog.json"), root: resolved };
-  }
-  return { catalogPath: resolved, root: dirname4(resolved) };
-}
-function resolvePayloadPath(root, payloadPath) {
-  if (isAbsolute(payloadPath)) {
-    throw new Error("Prompt injection payloadPath must be relative.");
-  }
-  const resolved = resolve(root, payloadPath);
-  const relativePath = relative(root, resolved);
-  if (relativePath === ".." || relativePath.startsWith(`..${sep}`)) {
-    throw new Error("Prompt injection payloadPath must stay within the library.");
-  }
-  return resolved;
-}
-function parsePromptInjectionLibrary(raw, root) {
-  const parsed = PromptInjectionLibraryFileSchema.parse(JSON.parse(raw));
-  const catalogEntries = Array.isArray(parsed) ? parsed : ("payloads" in parsed) ? parsed.payloads : parsed.injections;
-  const entries = catalogEntries.map((entry) => {
-    const payloadFile = resolvePayloadPath(root, entry.payloadPath);
-    const payload = readFileSync2(payloadFile, "utf-8");
-    const { payloadPath: _payloadPath, name, category, ...safeEntry } = entry;
-    return {
-      ...safeEntry,
-      name: name ?? entry.id,
-      category: category ?? "uncategorized",
-      payload,
-      payloadFilePath: payloadFile
-    };
-  });
-  return new StaticPromptInjectionLibrary(entries);
-}
-async function readSource(source) {
-  if (source.startsWith("https://") || source.startsWith("http://")) {
-    throw new Error("Prompt injection library source must be a local path, not a URL.");
-  }
-  const { catalogPath, root } = resolveCatalogPath(source);
-  return parsePromptInjectionLibrary(readFileSync2(catalogPath, "utf-8"), root);
-}
-async function loadPromptInjectionLibrary(source) {
-  let cached2 = SOURCE_CACHE.get(source);
-  if (!cached2) {
-    cached2 = readSource(source).catch((err) => {
-      SOURCE_CACHE.delete(source);
-      throw err;
-    });
-    SOURCE_CACHE.set(source, cached2);
-  }
-  return cached2;
-}
-async function getPromptInjectionLibrary(opts) {
-  if (opts?.library)
-    return opts.library;
-  const source = resolvePromptInjectionLibrarySource(opts?.source);
-  if (!source)
-    return EMPTY_PROMPT_INJECTION_LIBRARY;
-  return loadPromptInjectionLibrary(source);
-}
-function resolvePromptInjectionRefs(value, library) {
-  if (isPromptInjectionRef(value)) {
-    const payload = library.getPayload(value.id);
-    if (!payload)
-      throw new Error(`Unknown prompt injection id: ${value.id}`);
-    return payload;
-  }
-  if (Array.isArray(value)) {
-    return value.map((item) => resolvePromptInjectionRefs(item, library));
-  }
-  if (typeof value === "object" && value !== null) {
-    const resolved = {};
-    for (const [key, nested] of Object.entries(value)) {
-      resolved[key] = resolvePromptInjectionRefs(nested, library);
-    }
-    return resolved;
-  }
-  return value;
-}
-function redactPromptInjectionPayloads(value, library) {
-  let redacted = value;
-  for (const entry of library.listCatalog()) {
-    const payload = library.getPayload(entry.id);
-    if (!payload)
-      continue;
-    redacted = redacted.split(payload).join(`[PROMPT_INJECTION:${entry.id}]`);
-  }
-  return redacted;
-}
-
-// src/core/agents/offSecAgent/tools/browserTools.ts
+import { join as join6 } from "node:path";
 var BROWSER_TOOL_NAMES = [
   "browser_navigate",
   "browser_snapshot",
@@ -114838,87 +114676,41 @@ var BROWSER_TOOL_NAMES = [
   "browser_get_cookies"
 ];
 function createBrowserToolset(ctx) {
-  const tools = ctx.sandbox ? createSandboxBrowserTools(ctx) : createBrowserTools(ctx.target ?? "", join7(ctx.session.rootPath, "evidence"), "operator", undefined, ctx.abortSignal, undefined, undefined, undefined, ctx.browserSession);
-  const cm = ctx.credentialManager;
-  const injectionEnabled = !!(ctx.promptInjectionLibrary || ctx.promptInjectionLibrarySource);
-  if (!cm && !injectionEnabled) {
+  const tools = ctx.sandbox ? createSandboxBrowserTools(ctx) : createBrowserTools(ctx.target ?? "", join6(ctx.session.rootPath, "evidence"), "operator", undefined, ctx.abortSignal, undefined, undefined, undefined, ctx.browserSession);
+  if (!ctx.credentialManager) {
     return tools;
   }
   const originalFill = tools.browser_fill;
-  const shape = {
-    element: exports_external.string().describe("Description of form field, e.g., 'Username field' or 'Search input'"),
-    ref: exports_external.string().optional().describe("Element reference from browser_snapshot (e.g., 'e3'). If provided, uses exact element reference for precise filling."),
-    value: exports_external.string().optional().describe("Literal value to fill into the field. Omit when using promptInjection.id or credentialId + credentialField."),
-    toolCallDescription: exports_external.string().describe("Why you are filling this field with this value")
-  };
-  if (injectionEnabled) {
-    shape.promptInjection = exports_external.object({
-      id: exports_external.string().describe("Stable prompt-injection id returned by list_prompt_injections.")
-    }).optional().describe("Deliver a hidden prompt-injection payload into this field instead of a literal `value`. The payload is resolved from the library by id and typed into the field WITHOUT being revealed to you; the echoed result is redacted. Use this to fire library payloads into chat boxes / text inputs, then click send.");
-  }
-  if (cm) {
-    shape.credentialId = exports_external.string().optional().describe("ID of a stored credential. When provided with credentialField, the secret is resolved automatically.");
-    shape.credentialField = exports_external.enum([
-      "password",
-      "username",
-      "apiKey",
-      "bearerToken",
-      "cookies",
-      "sessionToken"
-    ]).optional().describe("Which field to extract from the credential (e.g. 'password'). Required when credentialId is set.");
-  }
-  let description = originalFill.description ?? "";
-  if (injectionEnabled) {
-    description += `
-
-Prompt-injection delivery: to type a library payload into a field ` + `(chat box, comment, profile field, etc.), pass "promptInjection": ` + `{ "id": "<id from list_prompt_injections>" } and omit "value". The ` + `payload is injected without being revealed to you and the echoed result ` + `is redacted. Click send/submit afterward to deliver it.`;
-  }
-  if (cm) {
-    description += `
-
-Credential mode: Instead of passing a raw secret as "value", you can ` + `pass "credentialId" + "credentialField" (e.g. "password") and the value ` + `will be resolved securely. Always prefer this when filling password or ` + `secret fields.`;
-  }
-  const execOptions = {
-    toolCallId: "",
-    messages: [],
-    abortSignal: undefined
-  };
-  const wrappedFill = tool({
-    description,
-    inputSchema: exports_external.object(shape),
-    execute: async (rawParams) => {
-      const params = rawParams;
-      const { element, ref, toolCallDescription } = params;
-      let value = params.value;
-      if (injectionEnabled && params.promptInjection?.id) {
-        const id = params.promptInjection.id;
-        const library = await getPromptInjectionLibrary({
-          library: ctx.promptInjectionLibrary,
-          source: ctx.promptInjectionLibrarySource
-        });
-        const payload = library.getPayload(id);
-        if (!payload) {
-          return {
-            success: false,
-            error: `Unknown prompt injection id: ${id}`
-          };
-        }
-        const fill = await originalFill.execute?.({ element, ref, value: payload, toolCallDescription }, execOptions);
-        if (fill && fill.success === false) {
-          return {
-            success: false,
-            element,
-            error: redactPromptInjectionPayloads(String(fill.error ?? ""), library) || "browser_fill failed"
-          };
-        }
-        return {
-          success: true,
-          element,
-          result: `[prompt_injection_ref ${id} typed into field; payload hidden]`
-        };
-      }
-      if (cm && params.credentialId && params.credentialField) {
-        const { credentialId, credentialField } = params;
+  const cm = ctx.credentialManager;
+  const credentialAwareFill = tool({
+    description: originalFill.description + `
+
+Credential mode: Instead of passing a raw secret as "value", you can pass ` + `"credentialId" + "credentialField" (e.g. "password") and the value will be ` + `resolved securely. Always prefer this when filling password or secret fields.`,
+    inputSchema: exports_external.object({
+      element: exports_external.string().describe("Description of form field, e.g., 'Username field' or 'Search input'"),
+      ref: exports_external.string().optional().describe("Element reference from browser_snapshot (e.g., 'e3'). If provided, uses exact element reference for precise filling."),
+      value: exports_external.string().optional().describe("Value to fill into the field. Omit when using credentialId + credentialField."),
+      credentialId: exports_external.string().optional().describe("ID of a stored credential. When provided with credentialField, the secret is resolved automatically."),
+      credentialField: exports_external.enum([
+        "password",
+        "username",
+        "apiKey",
+        "bearerToken",
+        "cookies",
+        "sessionToken"
+      ]).optional().describe("Which field to extract from the credential (e.g. 'password'). Required when credentialId is set."),
+      toolCallDescription: exports_external.string().describe("Why you are filling this field with this value")
+    }),
+    execute: async (params) => {
+      let { value } = params;
+      const {
+        element,
+        ref,
+        credentialId,
+        credentialField,
+        toolCallDescription
+      } = params;
+      if (credentialId && credentialField) {
         const stored = cm.resolve(credentialId);
         if (!stored) {
           return {
@@ -114941,15 +114733,15 @@ Credential mode: Instead of passing a raw secret as "value", you can ` + `pass "
       if (!value) {
         return {
           success: false,
-          error: injectionEnabled ? "Provide one of: value, promptInjection.id, or credentialId + credentialField" : "Either value or credentialId + credentialField must be provided"
+          error: "Either value or credentialId + credentialField must be provided"
         };
       }
-      return originalFill.execute?.({ element, ref, value, toolCallDescription }, execOptions);
+      return originalFill.execute?.({ element, ref, value, toolCallDescription }, { toolCallId: "", messages: [], abortSignal: undefined });
     }
   });
   return {
     ...tools,
-    browser_fill: wrappedFill
+    browser_fill: credentialAwareFill
   };
 }
 
@@ -115010,7 +114802,7 @@ init_zod();
 init_structured();
 init_lazyLogger();
 import { existsSync as existsSync4, mkdirSync as mkdirSync3, writeFileSync as writeFileSync4 } from "node:fs";
-import { join as join8 } from "node:path";
+import { join as join7 } from "node:path";
 var log = scopedLogger(() => createLogger("complete_authentication"));
 var AUTH_DIR = "auth";
 var AUTH_DATA_FILENAME = "auth-data.json";
@@ -115054,11 +114846,11 @@ This tool marks the end of the authentication flow.`,
       log.info(`Authentication complete: ${result.success ? "SUCCESS" : "FAILED"}`);
       let authDataPath;
       try {
-        const authDir = join8(ctx.session.rootPath, AUTH_DIR);
+        const authDir = join7(ctx.session.rootPath, AUTH_DIR);
         if (!existsSync4(authDir)) {
           mkdirSync3(authDir, { recursive: true });
         }
-        authDataPath = join8(authDir, AUTH_DATA_FILENAME);
+        authDataPath = join7(authDir, AUTH_DATA_FILENAME);
         const authData = {
           authenticated: result.success,
           strategy: result.strategy || "unknown",
@@ -115275,7 +115067,7 @@ function crawlAuthenticated(ctx) {
 init_dist();
 init_zod();
 import { writeFileSync as writeFileSync5 } from "node:fs";
-import { join as join9 } from "node:path";
+import { join as join8 } from "node:path";
 function createAttackSurfaceReport(ctx) {
   return tool({
     description: `Provide attack surface analysis results to the orchestrator agent.
@@ -115301,7 +115093,7 @@ Call this at the END of your analysis with:
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async (results) => {
-      const resultsPath = join9(ctx.session.rootPath, "attack-surface-results.json");
+      const resultsPath = join8(ctx.session.rootPath, "attack-surface-results.json");
       writeFileSync5(resultsPath, JSON.stringify(results, null, 2));
       return {
         success: true,
@@ -115320,7 +115112,7 @@ init_structured();
 init_lazyLogger();
 import { existsSync as existsSync5 } from "node:fs";
 import { mkdir, writeFile } from "node:fs/promises";
-import { dirname as dirname5, isAbsolute as isAbsolute2, resolve as resolve2 } from "node:path";
+import { dirname as dirname4, isAbsolute, resolve } from "node:path";
 var log3 = scopedLogger(() => createLogger("create_file"));
 var createFileInputSchema = exports_external.object({
   path: exports_external.string().describe("Absolute or relative path for the new file"),
@@ -115343,7 +115135,7 @@ Parent directories are created automatically if they don't exist.`,
       overwrite = false
     }) => {
       log3.debug(`enter: path=${filePath}, contentLen=${content.length}, overwrite=${overwrite}, sandbox=${!!ctx.sandbox}`);
-      const resolved = isAbsolute2(filePath) ? filePath : resolve2(ctx.agentCwd, filePath);
+      const resolved = isAbsolute(filePath) ? filePath : resolve(ctx.agentCwd, filePath);
       log3.debug(`resolved: ${resolved}`);
       if (ctx.sandbox) {
         return executeSandboxCreate(ctx, resolved, content, overwrite);
@@ -115364,7 +115156,7 @@ async function executeLocalCreate(filePath, content, overwrite) {
         path: filePath
       };
     }
-    const dir = dirname5(filePath);
+    const dir = dirname4(filePath);
     log3.debug(`local: mkdir ${dir}`);
     await mkdir(dir, { recursive: true });
     log3.debug(`local: mkdir done, writing ${content.length} bytes`);
@@ -115398,7 +115190,7 @@ async function executeSandboxCreate(ctx, filePath, content, overwrite) {
         };
       }
     }
-    const dirPath = dirname5(filePath);
+    const dirPath = dirname4(filePath);
     await ctx.sandbox.execute(`mkdir -p "${dirPath}"`);
     const base64Content = Buffer.from(content).toString("base64");
     const writeResult = await ctx.sandbox.execute(`echo "${base64Content}" | base64 -d > "${filePath}"`);
@@ -115428,21 +115220,21 @@ init_dist();
 init_zod();
 
 // src/core/tasks/index.ts
-import { mkdirSync as mkdirSync4, readdirSync as readdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync6 } from "node:fs";
-import { join as join10 } from "node:path";
+import { mkdirSync as mkdirSync4, readdirSync as readdirSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync6 } from "node:fs";
+import { join as join9 } from "node:path";
 var HWM_FILENAME = "_hwm.json";
 function ensureDir(dir) {
   mkdirSync4(dir, { recursive: true });
 }
 function taskPath(tasksDir, id) {
-  return join10(tasksDir, `${id}.json`);
+  return join9(tasksDir, `${id}.json`);
 }
 function hwmPath(tasksDir) {
-  return join10(tasksDir, HWM_FILENAME);
+  return join9(tasksDir, HWM_FILENAME);
 }
 function readHighWaterMark(tasksDir) {
   try {
-    const raw = readFileSync3(hwmPath(tasksDir), "utf-8");
+    const raw = readFileSync2(hwmPath(tasksDir), "utf-8");
     const parsed = JSON.parse(raw);
     return { nextId: parsed.nextId ?? 1 };
   } catch {
@@ -115474,7 +115266,7 @@ function createTask(tasksDir, input) {
 }
 function getTask(tasksDir, id) {
   try {
-    const raw = readFileSync3(taskPath(tasksDir, id), "utf-8");
+    const raw = readFileSync2(taskPath(tasksDir, id), "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -115511,7 +115303,7 @@ function listTasks(tasksDir, filter) {
     if (!file.endsWith(".json") || file === HWM_FILENAME)
       continue;
     try {
-      const raw = readFileSync3(join10(tasksDir, file), "utf-8");
+      const raw = readFileSync2(join9(tasksDir, file), "utf-8");
       const task = JSON.parse(raw);
       if (filter?.status && task.status !== filter.status)
         continue;
@@ -115609,7 +115401,7 @@ init_dist();
 init_zod();
 init_credentials();
 import { writeFileSync as writeFileSync7 } from "node:fs";
-import { join as join11 } from "node:path";
+import { join as join10 } from "node:path";
 init_structured();
 init_lazyLogger();
 var log4 = scopedLogger(() => createLogger("delegate_auth"));
@@ -115775,7 +115567,7 @@ When to use delegate_to_auth_subagent vs authenticate_session:
         if (credentials) {
           ctx.session.credentialManager.addFromAuthCredentials(credentials);
         }
-        const { runAuthenticationAgent } = await import("./authentication-69dgp6ec.js");
+        const { runAuthenticationAgent } = await import("./authentication-qswvctj4.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const result = await runAuthenticationAgent({
@@ -115794,7 +115586,7 @@ When to use delegate_to_auth_subagent vs authenticate_session:
           parentSubagentId: ctx.subagentId
         });
         if (result.success) {
-          const sessionInfoPath = join11(ctx.session.rootPath, "session-info.json");
+          const sessionInfoPath = join10(ctx.session.rootPath, "session-info.json");
           const sessionInfo = {
             authenticated: true,
             username: username || "via_subagent",
@@ -115989,7 +115781,7 @@ function detectBarrier(bodyLower, statusCode) {
 init_dist();
 init_zod();
 import { existsSync as existsSync6, mkdirSync as mkdirSync5, writeFileSync as writeFileSync8 } from "node:fs";
-import { join as join12 } from "node:path";
+import { join as join11 } from "node:path";
 function sanitizeName(name) {
   return name.toLowerCase().replace(/[^a-z0-9-_.]/g, "_");
 }
@@ -116028,7 +115820,7 @@ function validateDomainUrl(value) {
   }
 }
 function documentApp(ctx) {
-  const baseAppsPath = join12(ctx.session.rootPath, "apps");
+  const baseAppsPath = join11(ctx.session.rootPath, "apps");
   return tool({
     description: `Document a discovered application during attack surface analysis.
 
@@ -116081,7 +115873,7 @@ Each application creates a JSON file in the apps directory for tracking and anal
       const sanitizedName = sanitizeName(input.appName);
       const timestamp = new Date().toISOString().replace(/[:.]/g, "-");
       const filename = `app_${sanitizedName}_${timestamp}.json`;
-      const filepath = join12(baseAppsPath, filename);
+      const filepath = join11(baseAppsPath, filename);
       const appRecord = {
         ...input,
         discoveredAt: new Date().toISOString(),
@@ -116105,7 +115897,7 @@ Each application creates a JSON file in the apps directory for tracking and anal
 init_dist();
 init_zod();
 import { existsSync as existsSync7, mkdirSync as mkdirSync6, writeFileSync as writeFileSync9 } from "node:fs";
-import { join as join13 } from "node:path";
+import { join as join12 } from "node:path";
 
 // src/core/agents/specialized/attackSurface/blackboxRiskScoring.ts
 var RISK_LEVEL_BASE_SCORE = {
@@ -116344,24 +116136,24 @@ function pLimit(concurrency) {
     activeCount--;
     resumeNext();
   };
-  const run = async (function_, resolve3, arguments_) => {
+  const run = async (function_, resolve2, arguments_) => {
     const result = (async () => function_(...arguments_))();
-    resolve3(result);
+    resolve2(result);
     try {
       await result;
     } catch {}
     next();
   };
-  const enqueue = (function_, resolve3, arguments_) => {
+  const enqueue = (function_, resolve2, arguments_) => {
     new Promise((internalResolve) => {
       queue.enqueue(internalResolve);
-    }).then(run.bind(undefined, function_, resolve3, arguments_));
+    }).then(run.bind(undefined, function_, resolve2, arguments_));
     if (activeCount < concurrency) {
       resumeNext();
     }
   };
-  const generator = (function_, ...arguments_) => new Promise((resolve3) => {
-    enqueue(function_, resolve3, arguments_);
+  const generator = (function_, ...arguments_) => new Promise((resolve2) => {
+    enqueue(function_, resolve2, arguments_);
   });
   Object.defineProperties(generator, {
     activeCount: {
@@ -116455,7 +116247,7 @@ async function generateThreatModelForEndpoint(ctx, input) {
   return threatModelLimiter(async () => {
     if (ctx.abortSignal?.aborted)
       return null;
-    const { CodeAgent } = await import("./agent-s4vkqxtr.js");
+    const { CodeAgent } = await import("./agent-8w9h3tnw.js");
     const subagentId = `threat-model-${sanitize(input.appName)}-${sanitize(input.routePath)}`;
     ctx.eventBus?.emit("subagent-spawn", {
       subagentId,
@@ -116763,7 +116555,7 @@ var documentEndpointInputSchema = exports_external.object({
   toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
 });
 function documentEndpoint(ctx) {
-  const baseAssetsPath = join13(ctx.session.rootPath, "assets");
+  const baseAssetsPath = join12(ctx.session.rootPath, "assets");
   return tool({
     description: `Document a discovered endpoint during attack surface analysis.
 
@@ -116809,14 +116601,14 @@ Each endpoint creates a JSON file in the assets directory for tracking and analy
           message: `routePath "${input.routePath}" is a full URL. The domain is already stored on the parent application. ` + `Use a path or access pattern instead (e.g. "/api/users", "/{objectKey}?X-Amz-Signature={sig}", "arn:aws:s3:::bucket-name").`
         };
       }
-      const targetDir = join13(baseAssetsPath, sanitizeName2(input.appName));
+      const targetDir = join12(baseAssetsPath, sanitizeName2(input.appName));
       if (!existsSync7(targetDir)) {
         mkdirSync6(targetDir, { recursive: true });
       }
       const sanitizedPath = sanitizeName2(input.routePath);
       const timestamp = new Date().toISOString().replace(/[:.]/g, "-");
       const filename = `asset_${sanitizedPath}_${timestamp}.json`;
-      const filepath = join13(targetDir, filename);
+      const filepath = join12(targetDir, filename);
       const heuristicRiskScore = computeBlackboxRiskScore(input.riskLevel, "endpoint", {
         url: input.routePath,
         method: input.method,
@@ -116894,7 +116686,7 @@ import {
   unlinkSync,
   writeFileSync as writeFileSync10
 } from "node:fs";
-import { join as join14 } from "node:path";
+import { join as join13 } from "node:path";
 
 // src/lib/cwe/types.ts
 init_zod();
@@ -118331,7 +118123,7 @@ init_lazyLogger();
 var log6 = scopedLogger(() => createLogger("FindingJudge"));
 async function judgeFinding(input, ctx) {
   try {
-    const { FindingJudgeAgent } = await import("./agent-nfshsy6s.js");
+    const { FindingJudgeAgent } = await import("./agent-737mxp3v.js");
     const agent = new FindingJudgeAgent({
       finding: input,
       model: ctx.model,
@@ -118621,14 +118413,14 @@ CRITICAL RULES — READ BEFORE CALLING:
           description: `POC execution output for ${filename}`
         });
         const timestamp = new Date().toISOString();
-        const outputDir = isVulnerability ? session.findingsPath : join14(session.rootPath, "informational");
+        const outputDir = isVulnerability ? session.findingsPath : join13(session.rootPath, "informational");
         if (!isVulnerability) {
           mkdirSync7(outputDir, { recursive: true });
         }
         let evidenceForPrompt = materializedEvidence;
         if (materializedEvidence.length > EVIDENCE_FILE_THRESHOLD) {
           const evidenceFilename = `${timestamp.split("T")[0]}-${slugify2(input.title, 40)}-evidence.txt`;
-          const evidenceFilePath = join14(outputDir, evidenceFilename);
+          const evidenceFilePath = join13(outputDir, evidenceFilename);
           writeFileSync10(evidenceFilePath, materializedEvidence);
           evidenceForPrompt = materializedEvidence.substring(0, EVIDENCE_FILE_THRESHOLD) + `
 ... [truncated — full output saved to ${evidenceFilename}]`;
@@ -118677,16 +118469,16 @@ CRITICAL RULES — READ BEFORE CALLING:
                 cvssResult = FALLBACK_CVSS;
                 break;
               }
-              await new Promise((resolve3) => {
-                const timer = setTimeout(resolve3, 2000);
+              await new Promise((resolve2) => {
+                const timer = setTimeout(resolve2, 2000);
                 if (ctx.abortSignal) {
                   const onAbort = () => {
                     clearTimeout(timer);
-                    resolve3();
+                    resolve2();
                   };
                   if (ctx.abortSignal.aborted) {
                     clearTimeout(timer);
-                    resolve3();
+                    resolve2();
                   } else {
                     ctx.abortSignal.addEventListener("abort", onAbort, {
                       once: true
@@ -118770,8 +118562,8 @@ CRITICAL RULES — READ BEFORE CALLING:
         const findingId = `${timestamp.split("T")[0]}-${slugify2(finding.title, 50)}`;
         const jsonFilename = `${findingId}.json`;
         const mdFilename = `${findingId}.md`;
-        const jsonPath = join14(outputDir, jsonFilename);
-        const mdPath = join14(outputDir, mdFilename);
+        const jsonPath = join13(outputDir, jsonFilename);
+        const mdPath = join13(outputDir, mdFilename);
         try {
           writeFileSync10(jsonPath, JSON.stringify(findingWithMeta, null, 2));
           const cvssSection = cvssWarning ? `## CVSS 4.0 Assessment
@@ -118854,7 +118646,7 @@ ${finding.references}` : ""}
 `;
           writeFileSync10(mdPath, markdown);
           if (isVulnerability) {
-            const summaryPath = join14(session.rootPath, "findings-summary.md");
+            const summaryPath = join13(session.rootPath, "findings-summary.md");
             const cweTag = cvssResult.cwes?.length ? ` (${cvssResult.cwes.map((c) => c.id).join(", ")})` : "";
             const cvssTag = cvssWarning ? "(estimated)" : `(CVSS ${cvssResult.score})`;
             const summaryEntry = `- [${finding.severity}] ${cvssTag}${cweTag} ${finding.title} - \`findings/${mdFilename}\`
@@ -118912,7 +118704,7 @@ async function executeLocalPoc(ctx, input) {
     mkdirSync7(pocsPath, { recursive: true });
   }
   const { filename, pocContent } = preparePoc(input);
-  const pocPath = join14(pocsPath, filename);
+  const pocPath = join13(pocsPath, filename);
   writeFileSync10(pocPath, pocContent);
   chmodSync(pocPath, 493);
   const { stdout, stderr, exitCode } = await runScript(POC_RUNNERS[input.pocType], pocPath, 60000, ctx.abortSignal);
@@ -118930,7 +118722,7 @@ async function executeSandboxPoc(ctx, input) {
   if (!existsSync8(localPocsPath)) {
     mkdirSync7(localPocsPath, { recursive: true });
   }
-  const localPocPath = join14(localPocsPath, filename);
+  const localPocPath = join13(localPocsPath, filename);
   writeFileSync10(localPocPath, pocContent);
   const sandboxPocPath = `/tmp/pocs/${filename}`;
   const base64Content = Buffer.from(pocContent).toString("base64");
@@ -118963,10 +118755,10 @@ POC file has been deleted.`,
 }
 function cleanupPocFiles(ctx, filename) {
   try {
-    unlinkSync(join14(ctx.session.pocsPath, filename));
+    unlinkSync(join13(ctx.session.pocsPath, filename));
   } catch {}
   try {
-    unlinkSync(join14(ctx.session.pocsPath, `${filename}.output.json`));
+    unlinkSync(join13(ctx.session.pocsPath, `${filename}.output.json`));
   } catch {}
 }
 function sanitizeFilename(str) {
@@ -119027,7 +118819,7 @@ ${commentChar} Created: ${new Date().toISOString()}
 }
 function writePocOutputSidecar(pocsPath, filename, stdout, stderr, exitCode, description) {
   try {
-    const outputPath = join14(pocsPath, `${filename}.output.json`);
+    const outputPath = join13(pocsPath, `${filename}.output.json`);
     writeFileSync10(outputPath, JSON.stringify({
       stdout,
       stderr,
@@ -119039,7 +118831,7 @@ function writePocOutputSidecar(pocsPath, filename, stdout, stderr, exitCode, des
   } catch {}
 }
 function runScript(runner, scriptPath, timeout, abortSignal) {
-  return new Promise((resolve3) => {
+  return new Promise((resolve2) => {
     const child = spawn2(runner, [scriptPath], {
       stdio: ["ignore", "pipe", "pipe"],
       detached: process.platform !== "win32"
@@ -119061,7 +118853,7 @@ function runScript(runner, scriptPath, timeout, abortSignal) {
         resolved = true;
         clearTimeout(timeoutTimer);
         abortCleanup?.();
-        resolve3(result);
+        resolve2(result);
       }
     };
     const killProcess = () => {
@@ -119374,8 +119166,8 @@ class ImapFlow extends EventEmitter2 {
     }
     let tag = (++this.tagCounter).toString(16).toUpperCase();
     options = options || {};
-    let promise2 = new Promise((resolve3, reject) => {
-      this.requestTagMap.set(tag, { command, attributes, options, resolve: resolve3, reject });
+    let promise2 = new Promise((resolve2, reject) => {
+      this.requestTagMap.set(tag, { command, attributes, options, resolve: resolve2, reject });
       this.requestQueue.push({ tag, command, attributes, options });
       this.trySend().catch((err) => {
         this.requestTagMap.delete(tag);
@@ -119481,7 +119273,7 @@ class ImapFlow extends EventEmitter2 {
         switch (parsed.command.toUpperCase()) {
           case "OK":
           case "BYE":
-            await new Promise((resolve3) => request.resolve({ response: parsed, next: resolve3 }));
+            await new Promise((resolve2) => request.resolve({ response: parsed, next: resolve2 }));
             break;
           case "NO":
           case "BAD": {
@@ -119498,7 +119290,7 @@ class ImapFlow extends EventEmitter2 {
               err.responseText = txt;
               if (err.responseStatus === "NO" && txt.includes("Some of the requested messages no longer exist")) {
                 this.log.warn({ msg: "Partial FETCH response", cid: this.id, err });
-                await new Promise((resolve3) => request.resolve({ response: parsed, next: resolve3 }));
+                await new Promise((resolve2) => request.resolve({ response: parsed, next: resolve2 }));
                 break;
               }
               let throttleDelay = false;
@@ -119534,7 +119326,7 @@ class ImapFlow extends EventEmitter2 {
       data.next();
       processedCount++;
       if (processedCount % 10 === 0) {
-        await new Promise((resolve3) => setImmediate(resolve3));
+        await new Promise((resolve2) => setImmediate(resolve2));
       }
     }
   }
@@ -119695,7 +119487,7 @@ class ImapFlow extends EventEmitter2 {
           }
           processedChunks++;
           if (processedChunks % 100 === 0) {
-            await new Promise((resolve3) => setImmediate(resolve3));
+            await new Promise((resolve2) => setImmediate(resolve2));
             if (!this.writeSocket) {
               break;
             }
@@ -119753,7 +119545,7 @@ class ImapFlow extends EventEmitter2 {
       return this._failSTARTTLS();
     }
     this.socket.unpipe(this.streamer);
-    let upgraded = await new Promise((resolve3, reject) => {
+    let upgraded = await new Promise((resolve2, reject) => {
       let socketPlain = this.socket;
       let opts = Object.assign({
         socket: this.socket,
@@ -119807,7 +119599,7 @@ class ImapFlow extends EventEmitter2 {
             });
           }
           socketPlain.removeListener("error", socketPlainErrorHandler);
-          return resolve3(true);
+          return resolve2(true);
         } catch (ex) {
           this.emitError(ex);
         }
@@ -119883,10 +119675,10 @@ class ImapFlow extends EventEmitter2 {
     }
     this.startSession().then(() => {
       if (typeof this.initialResolve === "function") {
-        let resolve3 = this.initialResolve;
+        let resolve2 = this.initialResolve;
         this.initialResolve = false;
         this.initialReject = false;
-        return resolve3();
+        return resolve2();
       }
     }).catch((err) => {
       this.log.error({ err, cid: this.id });
@@ -120128,7 +119920,7 @@ class ImapFlow extends EventEmitter2 {
         throw error2;
       }
     }
-    let connectPromise = new Promise((resolve3, reject) => {
+    let connectPromise = new Promise((resolve2, reject) => {
       this.connectTimeout = setTimeout(() => {
         let err = new Error("Failed to establish connection in required time");
         err.code = "CONNECT_TIMEOUT";
@@ -120176,7 +119968,7 @@ class ImapFlow extends EventEmitter2 {
           this.setSocketHandlers();
           this.setEventHandlers();
           this.socket.pipe(this.streamer);
-          this.initialResolve = resolve3;
+          this.initialResolve = resolve2;
           this.initialReject = reject;
         } catch (ex) {
           reject(ex);
@@ -120537,17 +120329,17 @@ class ImapFlow extends EventEmitter2 {
     let aborted2 = false;
     let push = false;
     let rowQueue = [];
-    let getNext = () => new Promise((resolve3, reject) => {
+    let getNext = () => new Promise((resolve2, reject) => {
       let check2 = () => {
         if (rowQueue.length) {
           let entry = rowQueue.shift();
           if (entry.err) {
             return reject(entry.err);
           }
-          return resolve3(entry.value);
+          return resolve2(entry.value);
         }
         if (finished) {
-          return resolve3(null);
+          return resolve2(null);
         }
         push = () => {
           push = false;
@@ -120832,7 +120624,7 @@ class ImapFlow extends EventEmitter2 {
         }
         if (writeChunk(chunk2) === false) {
           try {
-            await new Promise((resolve3, reject) => {
+            await new Promise((resolve2, reject) => {
               let resolved = false;
               const finish = (err) => {
                 if (resolved)
@@ -120844,7 +120636,7 @@ class ImapFlow extends EventEmitter2 {
                 if (err) {
                   reject(err);
                 } else {
-                  resolve3();
+                  resolve2();
                 }
               };
               stream.once("drain", () => finish());
@@ -121035,10 +120827,10 @@ class ImapFlow extends EventEmitter2 {
         }
         processedCount++;
         if (processedCount % 5 === 0) {
-          await new Promise((resolve4) => setImmediate(resolve4));
+          await new Promise((resolve3) => setImmediate(resolve3));
         }
         const lock = this.locks.shift();
-        const { resolve: resolve3, reject, path, options, lockId } = lock;
+        const { resolve: resolve2, reject, path, options, lockId } = lock;
         if (lock.acquireTimer) {
           clearTimeout(lock.acquireTimer);
           lock.acquireTimer = null;
@@ -121103,7 +120895,7 @@ class ImapFlow extends EventEmitter2 {
           });
           this.currentLock = lock;
           armHeldTimer();
-          resolve3({ path, release });
+          resolve2({ path, release });
           break;
         }
         try {
@@ -121117,7 +120909,7 @@ class ImapFlow extends EventEmitter2 {
           });
           this.currentLock = lock;
           armHeldTimer();
-          resolve3({ path, release });
+          resolve2({ path, release });
           break;
         } catch (err) {
           if (err.responseStatus === "NO") {
@@ -121164,8 +120956,8 @@ class ImapFlow extends EventEmitter2 {
         ...this.currentLock.options?.description && { description: this.currentLock.options?.description }
       } : null
     });
-    let lockPromise = new Promise((resolve3, reject) => {
-      let lockEntry = { resolve: resolve3, reject, path, options, lockId };
+    let lockPromise = new Promise((resolve2, reject) => {
+      let lockEntry = { resolve: resolve2, reject, path, options, lockId };
       this.locks.push(lockEntry);
       if (Number(options.acquireTimeout) > 0) {
         lockEntry.acquireTimer = setTimeout(() => {
@@ -122343,6 +122135,168 @@ init_dist();
 init_zod();
 import { existsSync as existsSync9, mkdirSync as mkdirSync8, writeFileSync as writeFileSync11 } from "node:fs";
 import { join as join15 } from "node:path";
+
+// src/core/prompt-injections/index.ts
+init_zod();
+import { createHash } from "node:crypto";
+import { readFileSync as readFileSync3, statSync as statSync2 } from "node:fs";
+import { dirname as dirname5, isAbsolute as isAbsolute2, join as join14, relative, resolve as resolve2, sep } from "node:path";
+function sha256(value) {
+  return createHash("sha256").update(value).digest("hex");
+}
+var PromptInjectionCatalogEntrySchema = exports_external.object({
+  id: exports_external.string().min(1),
+  name: exports_external.string().min(1).optional(),
+  category: exports_external.string().min(1).optional(),
+  description: exports_external.string().default(""),
+  tags: exports_external.array(exports_external.string()).default([]),
+  deliveryHints: exports_external.array(exports_external.string()).default([]),
+  expectedObservation: exports_external.string().default(""),
+  payloadPath: exports_external.string().min(1)
+});
+var PromptInjectionLibraryFileSchema = exports_external.union([
+  exports_external.array(PromptInjectionCatalogEntrySchema),
+  exports_external.object({
+    payloads: exports_external.array(PromptInjectionCatalogEntrySchema)
+  }),
+  exports_external.object({
+    injections: exports_external.array(PromptInjectionCatalogEntrySchema)
+  })
+]);
+function isPromptInjectionRef(value) {
+  return typeof value === "object" && value !== null && value.kind === "prompt_injection_ref" && typeof value.id === "string";
+}
+
+class StaticPromptInjectionLibrary {
+  ordered;
+  entries;
+  hashes;
+  constructor(entries) {
+    this.ordered = entries;
+    this.entries = new Map(entries.map((entry) => [entry.id, entry]));
+    this.hashes = new Map(entries.map((entry) => [entry.id, sha256(entry.payload)]));
+  }
+  listCatalog() {
+    return this.ordered.map(({ payload, payloadFilePath: _path, ...entry }) => ({
+      ...entry,
+      payloadHash: sha256(payload)
+    }));
+  }
+  getPayload(id) {
+    return this.entries.get(id)?.payload;
+  }
+  getPayloadFilePath(id) {
+    return this.entries.get(id)?.payloadFilePath;
+  }
+  getPayloadHash(id) {
+    return this.hashes.get(id);
+  }
+  has(id) {
+    return this.entries.has(id);
+  }
+}
+var EMPTY_PROMPT_INJECTION_LIBRARY = new StaticPromptInjectionLibrary([]);
+var SOURCE_CACHE = new Map;
+function resolvePromptInjectionLibrarySource(explicit) {
+  return explicit || process.env.PENSAR_PROMPT_INJECTION_LIBRARY || process.env.APEX_PROMPT_INJECTION_LIBRARY;
+}
+function resolveCatalogPath(source) {
+  if (source.startsWith("https://") || source.startsWith("http://")) {
+    throw new Error("Prompt injection library source must be a local path, not a URL.");
+  }
+  const path = source.startsWith("file://") ? source.slice(7) : source;
+  const resolved = isAbsolute2(path) ? path : resolve2(process.cwd(), path);
+  const stat = statSync2(resolved);
+  if (stat.isDirectory()) {
+    return { catalogPath: join14(resolved, "catalog.json"), root: resolved };
+  }
+  return { catalogPath: resolved, root: dirname5(resolved) };
+}
+function resolvePayloadPath(root, payloadPath) {
+  if (isAbsolute2(payloadPath)) {
+    throw new Error("Prompt injection payloadPath must be relative.");
+  }
+  const resolved = resolve2(root, payloadPath);
+  const relativePath = relative(root, resolved);
+  if (relativePath === ".." || relativePath.startsWith(`..${sep}`)) {
+    throw new Error("Prompt injection payloadPath must stay within the library.");
+  }
+  return resolved;
+}
+function parsePromptInjectionLibrary(raw, root) {
+  const parsed = PromptInjectionLibraryFileSchema.parse(JSON.parse(raw));
+  const catalogEntries = Array.isArray(parsed) ? parsed : ("payloads" in parsed) ? parsed.payloads : parsed.injections;
+  const entries = catalogEntries.map((entry) => {
+    const payloadFile = resolvePayloadPath(root, entry.payloadPath);
+    const payload = readFileSync3(payloadFile, "utf-8");
+    const { payloadPath: _payloadPath, name, category, ...safeEntry } = entry;
+    return {
+      ...safeEntry,
+      name: name ?? entry.id,
+      category: category ?? "uncategorized",
+      payload,
+      payloadFilePath: payloadFile
+    };
+  });
+  return new StaticPromptInjectionLibrary(entries);
+}
+async function readSource(source) {
+  if (source.startsWith("https://") || source.startsWith("http://")) {
+    throw new Error("Prompt injection library source must be a local path, not a URL.");
+  }
+  const { catalogPath, root } = resolveCatalogPath(source);
+  return parsePromptInjectionLibrary(readFileSync3(catalogPath, "utf-8"), root);
+}
+async function loadPromptInjectionLibrary(source) {
+  let cached2 = SOURCE_CACHE.get(source);
+  if (!cached2) {
+    cached2 = readSource(source).catch((err) => {
+      SOURCE_CACHE.delete(source);
+      throw err;
+    });
+    SOURCE_CACHE.set(source, cached2);
+  }
+  return cached2;
+}
+async function getPromptInjectionLibrary(opts) {
+  if (opts?.library)
+    return opts.library;
+  const source = resolvePromptInjectionLibrarySource(opts?.source);
+  if (!source)
+    return EMPTY_PROMPT_INJECTION_LIBRARY;
+  return loadPromptInjectionLibrary(source);
+}
+function resolvePromptInjectionRefs(value, library) {
+  if (isPromptInjectionRef(value)) {
+    const payload = library.getPayload(value.id);
+    if (!payload)
+      throw new Error(`Unknown prompt injection id: ${value.id}`);
+    return payload;
+  }
+  if (Array.isArray(value)) {
+    return value.map((item) => resolvePromptInjectionRefs(item, library));
+  }
+  if (typeof value === "object" && value !== null) {
+    const resolved = {};
+    for (const [key, nested] of Object.entries(value)) {
+      resolved[key] = resolvePromptInjectionRefs(nested, library);
+    }
+    return resolved;
+  }
+  return value;
+}
+function redactPromptInjectionPayloads(value, library) {
+  let redacted = value;
+  for (const entry of library.listCatalog()) {
+    const payload = library.getPayload(entry.id);
+    if (!payload)
+      continue;
+    redacted = redacted.split(payload).join(`[PROMPT_INJECTION:${entry.id}]`);
+  }
+  return redacted;
+}
+
+// src/core/agents/offSecAgent/tools/executeCommand.ts
 var MAX_INLINE = 50000;
 var MS_TIMEOUT_THRESHOLD = 1e4;
 var DEFAULT_PROMPT_INJECTION_FILE_ENV = "APEX_PROMPT_INJECTION_FILE";
@@ -124412,7 +124366,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
       });
       if (cwd) {
         try {
-          const { WhiteboxAttackSurfaceAgent } = await import("./index-xf9cpaaf.js");
+          const { WhiteboxAttackSurfaceAgent } = await import("./index-5h1hjhzw.js");
           const localBus = new AgentEventBus;
           AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
           const agent = new WhiteboxAttackSurfaceAgent({
@@ -124462,7 +124416,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
         }
       }
       try {
-        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-458t65hq.js");
+        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-vwm9t3h4.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const agent = new BlackboxAttackSurfaceAgent({
@@ -124540,7 +124494,7 @@ Omit \`cwd\` for blackbox mode (live target probing only).`,
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ target, cwd }) => {
-      const { runPentestWorkflow: workflow } = await import("./pentest-pc1098c0.js");
+      const { runPentestWorkflow: workflow } = await import("./pentest-1e30q7rs.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -126116,7 +126070,7 @@ Returns an array of results with the text output from each agent.`,
   });
 }
 async function runSingleCodingAgent(ctx, codebasePath, objective, agentIndex, name) {
-  const { CodeAgent } = await import("./agent-s4vkqxtr.js");
+  const { CodeAgent } = await import("./agent-8w9h3tnw.js");
   const subagentId = `coding-agent-${agentIndex}`;
   ctx.eventBus?.emit("subagent-spawn", {
     subagentId,
@@ -126622,7 +126576,7 @@ Returns the worker's summary, objective results, and finding count — but NOT t
           message: "spawn_pentest_agent requires a model in the tool context."
         };
       }
-      const { TargetedPentestAgent } = await import("./agent-3n3mpmyd.js");
+      const { TargetedPentestAgent } = await import("./agent-vdrtakz4.js");
       const findingsRegistry = ctx.findingsRegistry ?? FindingsRegistry.fromDirectory(ctx.session.findingsPath, {
         model: ctx.model,
         authConfig: ctx.authConfig,
@@ -126779,7 +126733,7 @@ Pass every target you want tested — the swarm handles concurrency automaticall
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ targets }) => {
-      const { runPentestSwarm, DEFAULT_CONCURRENCY: DEFAULT_CONCURRENCY2 } = await import("./pentest-pc1098c0.js");
+      const { runPentestSwarm, DEFAULT_CONCURRENCY: DEFAULT_CONCURRENCY2 } = await import("./pentest-1e30q7rs.js");
       if (!ctx.model) {
         return {
           success: false,